Doppel[.]exe | Triage

Resubmissions

28/06/2024, 17:50

240628-wezlmaxgjc 3

28/06/2024, 17:19

240628-vvy5cszgmk 3

Sharing

Copy URL Twitter E-mail

General

Target

Doppel.exe
Size

56KB
MD5

5693b2b4d5f5782fa50763ebdb35a4d1
SHA1

ea4df4f5610dea39f77cbf1580d6643b61d52c61
SHA256

7c616f83511b7f10d9e0dbcea356ad41311c6e56f70f17d2f0dc8b37b41a829f
SHA512

dbde2fe4658439487e51c862f781f2720818e5c4b5a37d23658493a98b6e9da8385fecda12ea6ebd9be34baf002a3d891e4e937450c8876399d41a539cf31a7a
SSDEEP

768:ZdMfFVKPi0a9jfKhb/7NVKS6fiCBYt+rjpOupIs0XBPhMYSVTQ00mCyQTY1jY32t:4fF/f8VKStURn8sY270Xs1jY32vlv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Doppel.exe

Files

Doppel.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

qwmif
Size: - Virtual size: 408KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mhuiw
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE